CVE-2022-49447
ARM: hisi: Add missing of_node_put after of_find_compatible_node
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
CISA's decision points: whether it is exploited, whether attacks can be automated, and how much control an attacker gets. Assessed (SSVC 2.0.3).What do these mean? →
- Exploitation: none
- Automatable: no
- Technical impact: partial
Summary
In the Linux kernel, the following vulnerability has been resolved: ARM: hisi: Add missing of_node_put after of_find_compatible_node of_find_compatible_node will increment the refcount of the returned device_node. Calling of_node_put() to avoid the refcount leak
Timeline
- CVE published
- CISA SSVC assessment
Exploitation: none · Automatable: no · Technical impact: partial
- Record last updated
Affected versions
- Linux Linux
Version range not reported
- Linux Linux
3.14
References 9
git.kernel.org
- stable/c/46cb7868811d025c3d29c10d18b3422db1cf20d5
- stable/c/f8da78b2bae1f54746647a2bb44f8bd6025c57af
- stable/c/dd4be8ecfb41a29e7c4e551b4e866157ce4a3429
- stable/c/e109058165137ef42841abd989f080adfefa14fa
- stable/c/21a3effe446dd6dc5eed7fe897c2f9b88c9a5d6d
- stable/c/a3265a9440030068547a20dfee646666f3ca5278
- stable/c/cafaaae4bb9ce84a2791fa29bf6907a9466c3883
- stable/c/45d211668d33c49d73f5213e8c2b58468108647c
- stable/c/9bc72e47d4630d58a840a66a869c56b29554cfe4